Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25.roa
File: 8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25.roa (raw, json)
Hash identifier: FUwQDbBeFEe7b2WddfcCoQjpcoQPeQ4Ozme3XZ9jkBQ=
Subject key identifier: 04:EC:D0:E8:00:8F:B5:99:9D:AC:59:50:59:68:85:85:5D:E9:51:34
Certificate issuer: /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Certificate serial: 24475A
Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25.roa
Signing time: Tue 31 Oct 2023 07:30:00 +0000
ROA not before: Tue 31 Oct 2023 07:30:00 +0000
ROA not after: Thu 30 Oct 2025 07:30:00 +0000
asID: 263817
IP address blocks: 138.185.28.0/24 maxlen: 24
138.185.31.0/24 maxlen: 24
2803:a40::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377562 (0x24475a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Validity
Not Before: Oct 31 07:30:00 2023 GMT
Not After : Oct 30 07:30:00 2025 GMT
Subject: CN=8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:4b:0d:e5:06:6c:2a:32:b1:95:58:b6:08:
f5:6a:27:b7:6a:7e:02:6e:35:66:9e:fd:7b:ce:ac:
f8:bb:e6:3e:4b:28:b0:c4:43:77:85:f2:96:e9:9f:
0a:8b:7d:5c:85:40:6a:88:ed:94:dc:e8:99:62:6c:
8e:69:7d:9a:05:a6:f2:a7:e0:54:c3:32:2c:5b:5c:
8a:ed:19:fd:a9:f0:1d:ea:d1:e3:e2:11:00:6a:e7:
3a:01:bb:eb:97:13:85:c1:77:42:88:b3:44:6d:ab:
8b:c8:e6:b6:1c:5a:69:50:1d:33:bb:9a:c7:45:91:
ea:58:92:47:53:da:96:31:12:07:b6:d1:41:8f:48:
3d:cf:cd:db:06:f0:c2:7d:11:91:95:30:54:6e:e0:
33:39:0f:c9:c4:27:e0:36:92:5f:bb:4b:ac:22:f6:
a8:7c:2a:96:4c:94:d3:d3:8a:3e:c4:68:80:43:79:
b7:3e:cc:66:49:4e:f2:89:a3:b3:f7:16:af:c1:4a:
a7:43:fe:a2:66:3a:1c:ef:9f:dc:85:d8:7a:f5:13:
94:f7:f7:5f:2e:9e:c7:63:41:82:4d:c3:6b:d1:8a:
81:0e:54:80:38:72:18:4e:65:f1:77:67:68:61:73:
62:0f:c3:60:b2:f6:c6:77:68:ee:dc:42:35:7e:01:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:D0:E8:00:8F:B5:99:9D:AC:59:50:59:68:85:85:5D:E9:51:34
X509v3 Authority Key Identifier:
keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/8b4a17b4a23cbb679c43abe2b06443ec3d7e6e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.28.0/24
138.185.31.0/24
IPv6:
2803:a40::/47
Signature Algorithm: sha256WithRSAEncryption
52:2b:d5:fb:db:48:a2:2a:d1:dd:ae:89:60:59:a1:a8:3a:20:
bb:42:c6:f4:56:e8:20:4d:be:cb:71:0e:3b:2e:9b:72:5b:93:
b6:a4:bf:17:77:b2:bf:e3:2b:28:d8:7c:1c:1d:22:3b:41:2a:
62:32:62:3c:8f:f0:da:48:7d:eb:8d:dd:a4:2a:bd:36:11:4e:
0d:1a:b0:f7:b3:4d:05:61:5f:58:11:84:f3:86:e6:62:8d:e4:
a1:5f:17:62:15:d9:41:cd:c9:b3:83:c6:2a:a3:2f:20:8a:bb:
0b:ae:b4:3f:95:d2:62:22:29:88:82:de:fa:72:ae:90:e2:18:
5e:a8:43:b1:2f:ff:35:54:4f:6d:3b:63:0c:7a:f8:9e:9c:00:
97:e8:c0:fb:a5:07:d2:76:ce:f8:87:6f:b4:0a:a4:fb:2a:fe:
37:20:ce:a2:36:5e:b7:d7:f8:c2:d7:7a:10:64:69:56:18:48:
36:6f:e2:d6:95:fb:4d:2a:d6:2f:95:1d:e4:c7:a6:0f:72:68:
47:b8:35:57:b2:5b:f4:b9:ab:e2:e9:87:3e:59:30:7e:47:32:
35:0c:ae:d4:9b:2d:be:ad:5d:f0:f6:05:9a:cd:5d:ed:4f:f7:
27:87:c1:92:58:1a:95:f5:3c:b4:c6:7e:44:db:19:21:8a:84:
af:82:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org